Privacy policy

This policy describes how personal data is collected and processed when a purchase is made through this website. It is provided in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation) and Lei 58/2019.

1. Controller

The controller is Angelina Suchkova, Empresário em Nome Individual (ENI), tax identification number 321463587. Full identification details are set out in the legal notice. Enquiries relating to this policy may be addressed to hello@madetobenear.com.

2. Data collected

Personal data is collected only in connection with an order. The following categories are processed:

• Name.
• Email address.
• Delivery address.
• Order details, being the items, sizes and quantities purchased.
• Confirmation of payment, together with the card type and the final four digits.

Card numbers are not collected, seen or stored by the controller. They are submitted directly to the payment service provider identified in clause 4.

No account is created and no registration is required. No newsletter is operated. Browsing behaviour is not tracked, and no profiling or automated decision-making takes place.

3. Purposes and legal bases

Performance of the contract — Article 6(1)(b) GDPR

Processing and dispatching orders, arranging delivery, handling returns and refunds, and responding to enquiries relating to an order.

Compliance with a legal obligation — Article 6(1)(c) GDPR

Issuing and retaining invoices and accounting records as required by Portuguese tax law, and meeting obligations under consumer protection legislation.

Legitimate interests — Article 6(1)(f) GDPR

Preventing and detecting fraudulent transactions, and maintaining the security and availability of the website.

4. Recipients

Personal data is not sold, rented or otherwise made available to third parties for their own purposes. It is disclosed only to the following recipients, and only to the extent necessary:

• Stripe — payment processing and fraud prevention. Stripe collects payment and delivery details directly at checkout and acts as an independent controller in respect of payment data.
• Cloudflare — hosting and delivery of this website. Connection data, including IP addresses, is processed for the purpose of serving and protecting the site.
• The carrier appointed to deliver the order, which receives the name, delivery address and contact details necessary for delivery.
• The controller's accountant and the Portuguese tax authority, in respect of invoicing and accounting obligations.

Personal data may additionally be disclosed where required by law or in response to a lawful request by a competent authority.

5. International transfers

The service providers identified in clause 4 may process data outside the European Economic Area. Where this occurs, the transfer is governed by the standard contractual clauses adopted by the European Commission or by another transfer mechanism permitted under Chapter V of the GDPR.

6. Retention

Invoicing and accounting records are retained for ten years, as required by Portuguese tax law. Correspondence relating to an order is retained for the duration of the legal guarantee of conformity and any applicable limitation period. Data is erased once these periods have elapsed.

7. Rights of the data subject

Data subjects have the right to obtain access to their personal data and to request its rectification or erasure, the restriction of processing, and the portability of data provided to the controller. Where processing is based on legitimate interests, data subjects have the right to object to it.

These rights may be exercised by writing to hello@madetobenear.com. A response will be provided within one month of receipt of the request.

Data subjects also have the right to lodge a complaint with the supervisory authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).

8. Cookies and local storage

This website sets no analytics, advertising or tracking cookies, and uses no third-party measurement scripts.

The contents of the shopping bag are held in the browser's local storage so that they persist between page views. This information remains on the device, is not transmitted to the controller, and may be cleared at any time through the browser's settings.

During checkout, the payment service provider sets the cookies strictly necessary to process the transaction and to prevent fraud. As these are necessary for a service expressly requested by the user, consent is not required.

9. Security

Appropriate technical and organisational measures are applied to protect personal data against unauthorised access, alteration, disclosure and loss. All connections to this website are encrypted, and payment data is handled exclusively by the payment service provider. No method of transmission or storage can be guaranteed to be entirely secure.

10. Children

This website is not directed at children. Purchases may be made only by persons aged 18 or over, and personal data relating to children is not knowingly collected.

11. External links

This website contains links to websites operated by third parties. The controller is not responsible for the content or the data protection practices of those websites.

12. Amendments

This policy may be amended. The current version is the one published on this page, together with the date on which it was last updated.

13. Contact

Enquiries relating to this policy or to the exercise of data subject rights may be sent to hello@madetobenear.com.